Move individual custom firewall rules to their own service files

This commit is contained in:
Bun 2025-03-18 03:27:12 -04:00
parent 7635beefb7
commit 505298331e
7 changed files with 61 additions and 43 deletions

View file

@ -3,7 +3,6 @@
imports = [
./mastodon
./matrix
./owncast
];
options.system.socialserver.enable = lib.mkEnableOption "Enable social media like services";

View file

@ -1,13 +0,0 @@
{ config, lib, ... }:
{
imports = [ ./nginx ];
config = lib.mkIf config.system.socialserver.enable {
services.owncast = {
enable = true;
port = 8060;
rtmp-port = 1945;
};
environment.persistence."/persist".directories = [ "/var/lib/owncast" ];
};
}

View file

@ -1,11 +0,0 @@
{ config, lib, ... }:
{
services.nginx.virtualHosts."live.nixfox.ca" = lib.mkIf config.services.owncast.enable {
enableACME = true;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8060";
proxyWebsockets = true;
};
};
}